PlatformProductsResearchAbout Request Investor Deck

Privacy Policy

Last Updated: April 28, 2026

This Privacy Policy describes how CC3PO LLC ("CC3PO", "we", "us", or "our"), a California limited liability company, collects, uses, shares, and protects your personal information when you use our websites, services, and AI-powered solutions.

1. Business Information

CC3PO LLC
California, United States
Email: legal@cc3po.com

2. Information We Collect

We collect the following types of information:

  • Personal Information: Name, email address, phone number, company name, and job title
  • Website Data: Website URLs you provide for audits, scans, or analysis
  • Communications: Messages, inquiries, and feedback you submit through forms, chat, or email
  • Usage Data: Pages visited, time spent, clicks, and navigation patterns
  • Device Information: Browser type, IP address, device type, screen resolution, and operating system
  • Cookies: Session and persistent cookies for functionality and analytics

3. AI Processing and Data Analysis

CC3PO uses artificial intelligence (AI) agents and machine learning systems to:

  • Analyze website data, security configurations, and performance metrics
  • Generate audit reports, recommendations, and insights
  • Power chatbots and automated customer support
  • Process and summarize communications

AI processing may involve sending your data to third-party AI service providers. We ensure all AI processing complies with applicable data protection laws. You retain ownership of your original data.

4. SMS Communications (Twilio)

If you provide your phone number, you may receive SMS messages from us via Twilio:

  • Consent: By providing your phone number, you consent to receive SMS communications
  • Frequency: Message frequency varies based on service interactions (typically 1-4 messages per month)
  • Opt-Out: Reply STOP at any time to unsubscribe from SMS messages
  • Help: Reply HELP for assistance or contact legal@cc3po.com
  • Carrier Rates: Message and data rates may apply per your carrier

5. Email Marketing

If you subscribe to our newsletter or marketing communications:

  • We store your email address securely
  • We send updates, insights, and service-related content
  • We do not sell or share your email with unauthorized third parties
  • You can unsubscribe at any time via the link in every email
  • Unsubscribe requests are processed within 10 business days

6. Cookies and Analytics

We use cookies and similar technologies for:

  • Essential Cookies: Required for site functionality and security
  • Analytics Cookies: Understanding how visitors use our sites (anonymized where possible)
  • Preferences: Remembering your settings and preferences
  • Marketing: Measuring the effectiveness of our campaigns

You can manage cookie preferences through your browser settings or our cookie banner.

7. Third-Party Services

We use the following third-party services to operate our business:

ServicePurposeData Shared
SupabaseDatabase and authenticationUser data, session data
NetlifyHosting and deploymentWebsite traffic, form submissions
StripePayment processingBilling information (encrypted)
TwilioSMS and voice communicationsPhone numbers, message content
VapiAI voice agentsVoice call data, transcripts
OpenAI / AnthropicAI processing and chatMessages, website data (for analysis)

8. Data Retention and Deletion

We retain your data for the following periods:

  • Account data: As long as your account is active, plus 2 years after closure
  • Audit reports: 3 years from creation date
  • Communications: 2 years
  • Analytics data: 14 months
  • Payment records: 7 years (for tax and accounting compliance)

You may request deletion of your personal data at any time by contacting legal@cc3po.com. We will comply within 30 days, subject to legal retention requirements.

9. California Consumer Privacy Act (CCPA)

As a California business, CC3PO complies with the CCPA. California residents have the right to:

  • Know: Request disclosure of the categories and specific pieces of personal information we collect
  • Delete: Request deletion of personal information (with certain exceptions)
  • Opt-Out: Opt-out of the sale of personal information
  • Non-Discrimination: Exercise your rights without fear of discriminatory treatment

We do not sell personal information. To exercise your CCPA rights, email legal@cc3po.com with subject line "CCPA Request".

10. GDPR Compliance (International Visitors)

For visitors from the European Economic Area (EEA), UK, and Switzerland, we comply with the General Data Protection Regulation (GDPR). Your rights include:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("Right to be Forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise your GDPR rights, email legal@cc3po.com.

11. Data Breach Notification

In the event of a data breach that affects your personal information:

  • We will notify affected users within 72 hours of discovery
  • Notifications will be sent via email to the address on file
  • We will provide details about what data was affected and steps we are taking
  • For breaches affecting California residents, we will comply with California breach notification laws
  • For breaches affecting EU residents, we will comply with GDPR Article 33 notification requirements

12. Security Measures

We implement industry-standard security measures including:

  • HTTPS/TLS encryption for all data in transit
  • Encrypted data storage at rest
  • Access controls and authentication
  • Regular security audits and penetration testing
  • Employee training on data protection

13. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified via email or prominent notice on our website.

15. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights: